Service compliance enforcement using user activity monitoring and work request verification

摘要

A computer implemented method, data processing system, and computer program product control point in time access to a remote client device and auditing system logs of the remote client device by an auditing server device to determine whether monitored user activity on the remote client device associated with a work request was in compliance with one or more regulations.

主权项

1. A computer program product for capturing and monitoring user activity, the computer program product comprising:
a non-transitory computer readable storage medium having computer readable program code embodied therewith that is executable by a computer, the computer readable program code comprising: computer readable program code configured to identify a monitored event by a workflow for a supported application, wherein the workflow performs workflow automation for the supported application in response to initiation of the supported application; computer readable program code, responsive to identifying the monitored event, configured to capture information about the monitored event, wherein the information captured about the monitored event includes a server response to the monitored event; computer readable program code configured to wait for image stabilization of a whole screen image to finish loading before capturing a screenshot of the supported application; computer readable program code, responsive to the image stabilization of the whole screen image after finishing loading, configured to capture the screenshot of the supported application; computer readable program code configured to apply a lossless data compression to a foreground of the screenshot that includes an active window of the supported application and apply a lossy data compression to a background of the screenshot that includes other windows and icons visible in the screenshot but excludes the active window; computer readable program code configured to associate the information with the screenshot; and computer readable program code configured to store the associated information and the screenshot as an audit log of the monitored event; wherein the computer includes a client side agent that is a client side software system that communicates with and performs tasks to synchronize data changes with an integrated management system server, and wherein the workflow is one of an application specific workflow that uses an application policy that defines which user commands are blocked and allowed, or a monitoring workflow that uses a monitoring policy that defines which user activities are stored in the audit log of the monitored event.